CVE-2025-40908

Summary

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

Affected Software

Weaknesses

• CWE-552: CWE-552 Files or Directories Accessible to External Parties

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/ingydotnet/yaml-libyaml-pm/issues/120
• https://github.com/ingydotnet/yaml-libyaml-pm/pull/121
• https://github.com/ingydotnet/yaml-libyaml-pm/pull/122

• ←Previous
• Next→